[Koha-bugs] [Bug 9611] Changing the password hashing algorithm from MD5 to more secure Bcrypt

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Sun Sep 29 05:14:37 CEST 2013


http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9611

--- Comment #59 from Bernardo Gonzalez Kriegel <bgkriegel at gmail.com> ---
(In reply to Robin Sheat from comment #58)
> (In reply to Bernardo Gonzalez Kriegel from comment #57)
> > This part of the cheat I can't replicate. 
> > Could you explain a little more?
> 
> What happens when you try to replicate it? It seems to me like it should
> work, though I haven't tested it myself. 
> 
> It's just loading the module and calling the password changing function
> directly, as a real LDAP auth process would.

If I feed 
perl -e 'use C4::Auth_with_ldap; C4::Auth_with_ldap::_do_changepassword("test",
12345, "test");'
with current password, it returns nothing, and pass is not updated

If I put a new password, last argument I suppose, then it returns 
Password mismatch after update to borrowernumber=12345 at
/home/bgkriegel/kohaclone/C4/Auth_with_ldap.pm line 274, <DATA> line 522.
and pass is not updated

I enabled ldap changing to 1 <useldapserver>1</useldapserver>
and just copy/paste ladp server conf from perldoc. And did this
because the oneliner do not run if there is no configuration.

So, perhaps I'm just doing something wrong, I don't know.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list